清单中的Firebase内容安全策略更改

Question

我试图通过我的Chrome扩展来访问我的Firebase数据库。 我不断收到这样的： -

我的清单文件中有这一行content_security_policy-

"content_security_policy": "script-src 'self' https://cdn.firebase.com https://*.firebaseio.com; object-src 'self'". 

编辑，这是错误的文字： -

拒绝框架'https：// .firebaseapp.com/.... ，因为它违反了以下内容安全策略指令：“帧-SRC https://clients4.google.com/insights/consumersurveys/https://calendar.google.com/accounts/ '自我' https://accounts.google.com/https://apis.google.com/u/https://apis.google.com/_/streamwidgets/https://clients6.google.com/static/https://content.googleapis.com/static/https://mail-attachment.googleusercontent.com/https://www.google.com/calendar/https://calendar.google.com/calendar/https://docs.google.com/https://drive.google.com的https：// .googleusercontent.com /文档/ securesc/https://feedback.googleusercontent.com/resources/https://www.google.com/tools/feedback/https://support.google.com/inapp/的https：// .googleusercontent.com /小工具/ IFR https://hangouts.google.com/https://talkgadget.google.com/的https：// .talkgadget.google.com/https://www-gm-opensocial.googleusercontent.com/gadgets/https://plus.google.com/https://wallet.google.com/gmail/https://www.youtube.com/embed/https://clients5.google.com/pagead/drt/dn/https://clients5.google.com/ads/measurement/jn/https://www.gstatic.com/mail/ww/https://www.gstatic.com/mail/intl/https://clients5.google.com/webstore/wall/https://ci3.googleusercontent.com/https://apis.google.com/additnow/https://www.gstatic.com/mail/promo/https://notifications.google.com/https://mail-payments.google.com/mail/payments/“。

拒绝加载脚本“https://...firebaseio.com/ .....因为它违反了以下内容安全政策指令：“剧本-SRC https://clients4.google.com/insights/consumersurveys/‘自我’'不安全内联‘不安全-EVAL’https://mail.google.com/_/scs/mail-static/https://hangouts.google.com/https://talkgadget.google.com/ HTTPS：/ /*.talkgadget.google.com/ https://www.googleapis.com/appsmarket/v2/installedApps/https://www-gm-opensocial.googleusercontent.com/gadgets/js/https://docs.google.com/static/doclist/client/js/https://www.google.com/tools/feedback/https://s.ytimg.com/yts/jsbin/https://www.youtube.com/iframe_apihttps://ssl.google-analytics.com/https://apis.google.com//scs/abc-static/https://apis.google.com/js/https://clients1.google.com/complete/https://apis.google.com//scs/apps-static/_/js/https://ssl.gstatic.com/inputtools/js/https://ssl.gstatic.com/cloudsearch/static/o/js/https://www.gstatic.com/feedback/js/https://www.gstatic.com/common_sharing/static/client/js/https://www.gstatic.com/og/_/js/”。

我正在尝试远程注入此脚本的firebase数据库。 ： -

var config = { 
     apiKey: -----, 
     authDomain: -----, 
     databaseURL: ----, 
     storageBucket: ----, 
     }; 
     firebase.initializeApp(config); 
     var dbRef=firebase.database().ref().child('text'); 
     $("#h1").on('keyup',function(){ 
     dbRef.set($("#h1").html()); 
     }); 

我应该怎么做才能解决这个错误？

Answer 1

拒绝加载脚本“https://...firebaseio.com/ .....因为它违反了以下内容安全策略directiv

你应该在你的扩展本身的firebase.js脚本，而不是试图加载它来自公共场所。